fix(ci): always update gitops and ensure high-performance-latest tag push

- Change if: success() to if: always() on gitops update step
- Add final fallback push with no cache if all builds fail
- Ensure high-performance-latest is always pushed even on partial failures

.gitea/workflows/build.yaml

@@ -212,7 +212,15 @@ jobs:
           done
 
           echo "Falling back to build without cache export for ${{ matrix.service }}"
-          build_without_cache_export
+          if ! build_without_cache_export; then
+            echo "Final fallback: push tags without cache"
+            docker buildx build --push \
+              -f Dockerfile.simple \
+              --build-arg SERVICE_NAME=${{ matrix.service }} \
+              -t "$REGISTRY_HOSTPORT/nxtgauge-rust-${{ matrix.service }}:${{ gitea.sha }}" \
+              -t "$REGISTRY_HOSTPORT/nxtgauge-rust-${{ matrix.service }}:high-performance-latest" \
+              .
+          fi
 
       - name: Prune old image tags (keep latest 1 SHA)
         if: success()
@@ -231,7 +239,7 @@ jobs:
             --keep 1
 
       - name: Update GitOps and trigger deployment
-        if: success()
+        if: always()
         continue-on-error: true
         env:
           GITEOPS_REPO: ${{ secrets.GITEOPS_REPO }}